Home
.. About WSUS Wiki

RSS

WSUS
.. WSUS FAQ
.. WSUS on SBS
.. WSUS Troubleshooting
.. WSUS News Groups
.. Known WSUS Issues
.. WSUS Links
.. WSUS Wish List

WSUS Documents
.. WSUS Deployment Guide
.. WSUS Installation Guide
.. WSUS Release Notes
.. WSUS Best Practice

SUS
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues
.. SUS FAQ
.. What Is SUS
.. SUS Troubleshooting
.. SUS Links
.. SUS Known Issues

Wiki Community

 .. Wiki Contributors
.. I Love WSUS
.. WSUS Wiki Diary
.. Wiki Statistics
.. To Do Page

Miscellaneous Stuff
.. Other Resources
.. Do You Know?

Site Meter

Terms of Use
Trademarks

Privacy Statement

 

Encryption Key Cannot be Retrieved

Show Menu

Symptoms

You may see an error when trying to make changes to the synchronization options such as trying to set a proxy server password or exact time for synchronization. The error looks like:

System.Security.Cryptography.CryptographicException: The encryption key cannot be retrieved. --->

System.Security.Cryptography.CryptographicException: An error occurred in the DPAPI. HRESULT: 0x800F0005 at Microsoft.UpdateServices.Internal.DataProtectionApi.Decrypt(Byte[] toDecrypt, Byte[] entropy, EncryptionLevel level) at
Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKeyThread()

This is what you get when you click on the show details button:

--- End of inner exception stack trace ---

at Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
at Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String stringToEncrypt)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_Proxy Password(String value)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProxy Password(String password)
at Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPostHandler& xPostHandler, IUpdateServerConfiguration&newUpdateServerConfiguration)
at Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationValues(XPostHandler& xPostHandler)
at Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizationValues(String xPostXml)
at Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Objectsender, EventArgs e)
at Microsoft.UpdateServices.Internal.EncryptionUtilities.GetEncryptionKey()
at Microsoft.UpdateServices.Internal.EncryptionUtilities.EncryptString(String stringToEncrypt)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.set_Proxy Password(String value)
at Microsoft.UpdateServices.Internal.BaseApi.UpdateServerConfiguration.SetProxy Password(String password)
at Administration.Manage.Subscriptions.SubscriptionProxy.SaveProxyValues(XPostHandler& xPostHandler, IUpdateServerConfiguration&newUpdateServerConfiguration)
at Administration.Manage.Subscriptions.SubscriptionProxy.SaveSynchronizationValues(XPostHandler& xPostHandler)
at Administration.Manage.Subscriptions.SubscriptionProxy.ValidateSynchronizationValues(String xPostXml)
at Administration.Manage.Subscriptions.SubscriptionXPost.Page_Load(Object sender,EventArgse)

WORKAROUND

On Windows 2003 Server, make sure the NetworkService account has read access to the system drive. You can use the CACLS command to adjust the ACLs.

CAUSE

For Windows Server 2003 a possible cause is that the NetworkService user account does not have read access to root drive of system drive.

STATUS

Microsoft is currently investigating this issue.

Last Modified 4/16/05 4:11 AM